[dist] autogenerate certs